8 matches found
CVE-2026-64837
ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and access the Properties function to execute...
CVE-2026-64837 ICEcoder through 8.1 OS Command Injection via lib/properties.php
ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and access the Properties function to execute...
CVE-2026-64837
ICEcoder through 8.1 is vulnerable to OS command injection in lib/properties.php . The root cause is an unescaped filesystem path passed to a shell command via popen() . An authenticated attacker can create directories containing shell metacharacters in their names and then invoke the Properties ...
EUVD-2026-75454
ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and access the Properties function to execute...
PT-2026-89418
ICEcoder through 8.1 passes an unescaped filesystem path into a shell command in lib/properties.php, allowing authenticated users to inject OS commands through directory names. Attackers can create directories with shell metacharacters in their names and access the Properties function to execute...
antiquehomesmagazine.com XSS vulnerability
Vulnerable URL: http://www.antiquehomesmagazine.com/Properties.php?count=25=1/-///'/"//--...
bayviewnetwork.net XSS vulnerability
Vulnerable URL: http://bayviewnetwork.net/properties.php?byfield=price=1/-///'/"//--...
srwood.co.uk XSS vulnerability
Vulnerable URL: http://www.srwood.co.uk/properties.php?propertyID=%27230%27"--!"=3=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6263306 VIP website status:| No Check srwood.co....